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(57) Abstract: A method of operating a portable 
data storage device or electrical equipment 
incorporating a communication module is 
disclosed. The method comprises initiating an 
alert procedure in response to a predetermined 
condition, the alert procedure comprising 
communicating a unique identifier of the portable 
data storage device or electrical equipment to a 
network. The identifier may then be used to locate 
and identify the portable data storage device or 
electrical equipment. 
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Protection of Devices 

The present invention relates to portable data storage devices and relates 
particularly to the detection or prevention of loss or theft of such devices. 

5 

In recent years, a significant decrease in the size of high technology devices which 
may be used to store and use data has allowed an increase in the portability of such 
devices and a proliferation in their use. Mobile telephone handsets, personal data 
assistants (PDAs) and handheld computers are just a few examples of data storage 
10 and utilisation devices that are commonly used and carried. As the use of such 
devices has grown, however, problems have arisen both in terms of loss of the data 
storage devices and their theft. 

Individual manufacturers of the various portable devices have implemented 
15 mechanisms by which owners of a device may protect against the loss of 
information stored within the device and by which owners may protect against further 
use of the device once it has been stolen or lost. For example, many handheld 
computers are provided with a docking station via which data stored on the device 
may be downloaded and backed up to, for example a desktop computer. In the case 
20 of mobile telephones, a stolen or lost handset may be disabled by the mobile 
telecommunications network operator, since each mobile device has a unique 
International Mobile Equipment Identity (IMEI) number. If the IMEI number of a 
mobile handset is blocked from use on a mobile telecommunications network, then 
a stolen or lost handset may be rendered unusable. 

25 

The prior art solutions, however, require user input to ensure that data is backed up 
or that the device is rendered unusable after it has been lost or stolen. In addition, 
it may be possible for security features to be overcome, for example, the IMEI 
number of a mobile telephone may be altered by way of a relatively straightforward 
30 procedure, allowing a stolen mobile telephone to be used. Also, it may be possible 
to render a mobile telephone handset unusable, but the data stored on the handset 
may be lost if the handset is lost or stolen. 
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The present invention aims to provide a solution to the problems associated with the 
loss or theft of portable data storage devices, wherein the solution may be 
implemented over a wide range of storage devices. 

According to a first aspect, there is provided a method of operating a portable data 
storage device, the method comprising initiating an alert procedure in response to 
a predetermined condition, the alert procedure comprising communicating a unique 
identifier of the portable data storage device to a network. 

Communicating a unique identifier of the portable data storage device to a network 
may advantageously allow remote identification of the portable data storage device 
at which the alert procedure has been initiated. Identification of the portable data 
storage device at the network may occur immediately as the alert procedure is 
initiated, so there may be no delay in identifying the portable data storage device to 
the network once the alert procedure has been initiated. This may be faster and 
more reliable than, for example, waiting for the owner of the portable data storage 
device to identify the portable data storage device to the network. 

Preferably, the method further comprises communicating periodically or quasi- 
continuously between the portable data storage device and a backup device over 
a wireless communication link. 

More preferably, the predetermined condition comprises failure of the wireless 
communication link between the portable data storage device and the backup device 
for a predetermined period. Hence separation of the portable data storage device 
and the backup device for a predetermined period, for example due to theft or loss 
of the portable data storage device, may allow automatic initiation of the alert 
procedure. This may allow loss or theft of the portable data storage device to be 
noted as soon as the portable data storage device passes out of range of 
communication with the backup device. Again, this may remove the reliance on the 
owner of the portable data storage device to note the loss of the portable data 
storage device and to report that loss. 
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According to further embodiments, the predetermined condition may comprise 
conditions which arise in other situations, in addition to or in place of the condition 
outlined above. For example, the alert procedure may be initiated whenever an 
incorrect (or any) Personal Identification Number (PIN) is entered into the portable 
5 data storage device (for example, if a PIN is used to unlock the keypad of the 
portable data storage device). The alert procedure may be initiated periodically and 
automatically after a predetermined period. Switching on the portable data storage 
device may initiate the alert procedure, or the alert procedure may be initiated by a 
change in the location of the portable data storage device, for example, if the 
1 0 portable data storage device is a mobile telephone, this may comprise a change in 
the base station to which the mobile telephone is connected. The alert procedure 
may be initiated by a request from the network or upon the establishment of a call. 
The alert procedure may further be initiated when a portable data storage device, 
such as a mobile telephone, first connects to the network. 

15 

According to a highly preferable feature, the wireless communication link is a 
Bluetooth communication link. A Bluetooth 4 link may provide a reliable link between 
the portable data storage device and the backup device and is suitable for use in 
communicating directly between the two devices over a short distance. 

20 

Preferably, the unique identifier of the portable data storage device is a Bluetooth 
serial number for the portable data storage device. As described in more detail 
below, each Bluetooth chip has a unique identifier, or serial number, which is difficult 
to alter. Hence the Bluetooth serial number may be used as a 'tag' for the portable 
25 data storage device. 

The unique identifier may be communicated in addition to an International Mobile 
Equipment Identity (IMEI) number. Preferably, in at least one procedure in which 
the IMEI is communicated to a network, the unique identifier or a certificate based 
30 on the unique identifier (optionally in addition to an original IMEI number) is 
communicated in addition; this may enable the IMEI number to be authenticated. 
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According to a further preferable feature, the identifier of the portable data storage 
device comprises both a Bluetooth serial number and an International Mobile 
Equipment Identity (IMEI) number. This may allow the security of the system to be 
further increased since the identity of a portable data storage device may be verified 
5 more positively. In addition, the Bluetooth serial number may be verified against the 
corresponding IMEI number to ensure that the two numbers correspond to the same 
portable data storage device. This may allow the detection of portable data storage 
devices for which the IMEI number has been altered, which may allow the provision 
of the further feature that portable data storage devices that have not been identified 
10 to the network as being lost or stolen but which have been tampered with may be 
identified. 

Preferably, a detection device may download the unique identifier of the portable 
data storage device from the network. This may allow the detection device to store 
15 a list of portable data storage devices that have been lost or stolen so that these 
portable data storage devices may be recovered if they are detected. 

Preferably, the detection device queries the portable data storage device over a 
wireless communication link to obtain the unique identifier of the portable data 
20 storage device. The detection device may query any portable data storage device 
that is in range over a wireless communication link, such as a Bluetooth link. This 
may allow the detection device to identify any portable data storage device and may 
allow the user of the detection device to recover any portable data storage device 
listed as lost or stolen. 

25 

According to a further preferable feature, data stored in the portable data storage 
device is transferred to the backup device over the wireless communication link. 
Hence data stored in the portable data storage device may not be lost if the portable 
data storage device itself is lost or stolen. Transfer of data to the backup device may 
30 occur automatically at predetermined intervals, or may be initiated by the user of the 
portable data storage device. The data may include the unique identifier of the 
portable data storage device. 



WO 03/009621 



PCT/GB02/03287 



-5- 

According to one preferable feature, the unique identifier of the portable data 
storage device is communicated to the network by the portable data storage device. 
Hence the portable data storage device may report its own loss or theft to the 
network on initiation of the alert procedure. 

According to a further preferable feature, the unique identifier of the portable data 
storage device is communicated to the network by the backup device. This may 
occur in addition to, or instead of the portable data storage device reporting to the 
network. Hence this feature may act as a backup in case the portable data storage 
device itself cannot signal to the network. The network may be arranged to ignore 
a report received from a backup device if it has already received a report from the 
portable data storage device itself. 

Preferably, the alert procedure further comprises communicating the unique 
identifier of the portable data storage device over a wireless communication link to 
a detection device. This may allow the identifier to be transmitted directly to any 
detection device that is within range of the portable data storage device or the 
backup device when the alert procedure is initiated. Hence any delay in detecting 
a lost or stolen portable data storage device may be minimised. 

A second aspect provides a portable data storage device comprising: 
means for storing a unique identifier; 

means for implementing an alert procedure in response to a predetermined 
condition; 

means for communicating the unique identifier to a network as part of the 
alert procedure. 

The advantages of the second aspect and its preferred features are similar to the 
advantages of the corresponding features of the first aspect outlined above. 

Preferably, the portable data storage device further comprises a Bluetooth chip, 
wherein the unique identifier is the Bluetooth serial number. 
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More preferably, the portable data storage device has an International Mobile 
Equipment Identity (IMEI) number, which is communicated to the network as part of 
the alert procedure in addition to the unique identifier. 

5 Preferably, the portable data storage device further comprises means for 
communicating periodically or quasi-continuously with a backup device over a 
wireless communication link. 

Further preferably, data stored within the portable data storage device is 
10 communicated to the backup device over a wireless communication link. 

According to a further preferable feature the predetermined condition comprises 
failure of the wireless communication link between the portable data storage device 
and the backup device for a predetermined period. 

15 

Preferably, the wireless communication link between the portable data storage 
device and the backup device is a Bluetooth communication link. 

A third aspect provides a method of detecting a lost or stolen portable data storage 
20 device comprising: 

receiving at least one identifier of a portable data storage device over a 
wireless communication link; 

determining whether the identifier of the portable data storage device 
corresponds to an identifier on a list of stolen or lost portable data storage 
25 devices. 

As outlined above, this may allow lost or stolen portable data storage devices to be 
identified quickly and reliably. Since the method uses a wireless communication link, 
it is not necessary to establish physical connection to each portable data storage 
30 device. 



Preferably, the method further comprises storing a list of identifiers of lost or stolen 
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portable data storage devices. 

Preferably, the method further comprises requesting the at least one identifier of the 
portable data storage device over a wireless communication link. Using a wireless 
5 communication link, it is possible to 'scan' an area for portable data storage devices, 
requesting an identifier from each to identify any that are contained within the list. 

Preferably, the wireless communication link is a Bluetooth communication link. As 
discussed above, a Bluetooth link may provide a reliable method by which short 
1 0 range communication may be established directly between Bluetooth devices. 

Preferably, the at least one identifier of the portable data storage device is at least 
one of: 

the Bluetooth serial number of the portable data storage device; 
1 5 the IMEI number of the portable data storage device. 

In the case of a mobile telephone, both identifiers may be provided for increased 
security. 

Preferably, the list of identifiers of stolen or lost portable data storage devices is 
20 downloaded from a network. The network list may be updated automatically as 
portable data storage devices initiate an alert procedure, as described above. This 
list may then be periodically downloaded to detection devices, either over a physical 
link, or using a wireless communications link. 

25 According to a fourth aspect, there is provided apparatus for detecting a lost or 
stolen portable data storage device comprising: 

means for receiving at least one identifier of a portable data storage device 
over a wireless communication link; 

memory means for storing a list of identifiers of stolen or lost portable data 
30 storage devices; 

means for determining whether the received identifier of the portable data 
storage device corresponds to an identifier on the list of identifiers of stolen 
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or lost portable data storage devices. 

Features of the third aspect outlined above may be applied to the fourth aspect. In 
the case of a Bluetooth or similar link, the apparatus may scan for lost or stolen 
5 devices in the vicinity and scanning devices may be given to enforcement agents 
and/or located in public places to trigger an alarm or to initiate an alert procedure on 
the device. 

An audible alarm on the portable device may be triggered signifying to those in the 
10 vicinity that the device is stolen or lost; this may be triggered via a 
telecommunications network following receipt of the unique identifier or by a short 
range wireless communications link. 

Preferably, the apparatus further comprises means for requesting the at least one 
15 identifier of the portable data storage device over a wireless communication link. 

Preferably, the wireless communication link is a Bluetooth communication link. 

According to a further preferable feature, the at least one identifier of the portable 
20 data storage device is at least one of: 

the Bluetooth serial number of the portable data storage device; 
the IMEI number of the portable data storage device. 

Preferably, the apparatus further comprises means for downloading the list of 
25 identifiers of stolen or lost portable data storage devices from a network. 

According to a fifth aspect, there is provided a method of verifying the identity of a 
portable data storage device comprising: 

receiving, over a wireless communication link, an IMEI number for the 
30 portable data storage device; 

receiving, over a wireless communication link, a further unique identifier for 
the portable data storage device; 
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verifying that the received IMEI number and the further unique identifier 
correspond to the same the portable data storage device. 

Since the IMEI number of a portable data storage device may be altered according 
5 to a straightforward procedure, it is preferable if the identity of a portable data 
storage device can be verified using a combination of the IMEI number and another 
independent unique identifier. This may allow the identity of the portable data 
storage device to be ascertained more accurately and with more certainty and may 
allow the detection of devices that have been tampered with, or that have had their 

10 IMEI numbers altered. Receiving the required information over a wireless 
communication link may allow the detection to be performed remotely, so that a 
physical connection between the portable data storage device and the detection 
device is not required. This may allow verification of the identity of the portable data 
storage device without requiring the knowledge or co-operation of the user of the 

1 5 portable data storage device. 

Preferably, the wireless communication link is a Bluetooth communication link. As 
discussed above, a Bluetooth link provides a reliable and easily implemented 
communications link over a short range between two devices. 

20 

Preferably, the further unique identifier is a Bluetooth serial number for a Bluetooth 
chip contained within the portable data storage device. As discussed above, each 
Bluetooth chip has a unique identifier, which it is difficult to alter. Hence the 
Bluetooth serial number may provide a suitable 'tag' for a Bluetooth-enabled 
25 portable data storage device. 

Preferably wherein the step of verifying comprises checking the received IMEI 
number against the further unique identifier in a preexisting database. This database 
may be stored within the device that is verifying the identity of the portable data 
30 storage device, or may be accessed remotely by the verifying device. 



Verification of the identity of the portable data storage device may be undertaken by 
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a network to which the portable data storage device is connected, or it may be 
undertaken by direct interrogation from a detection device, for example a handheld 
device carried by an authority such as the police. 

Verification may take place automatically or periodically, or the process may be 
initiated in response to a predetermined condition or an alert procedure, such as one 
of the conditions or alert procedures outlined above for the first aspect. These 
predetermined conditions may include verifying the identity of a portable data 
storage device when it first connects to a network, or when it attempts to set up a 
connection (for example a mobile telephone call) across the network. 

According to a further preferable feature, a certificate is generated for the portable 
data storage device if the received IMEI number and the further unique identifier 
correspond to the same portable data storage device. This may allow other devices 
to be sure that the identity of the portable data storage device has been correctly 
verified, and may mean that it is not necessary to verify the identity of the portable 
data storage device again at a later date. The verification device could simply check 
that the portable data storage device has been issued with a verification certificate. 

A further aspect provides a method of operating a communication module, the 
method comprising initiating an alert procedure in response to a predetermined 
condition, the alert procedure comprising communicating a unique identifier of the 
communication module to a network. 

Preferably, the communication module comprises means for operating a Bluetooth 
wireless communication link. However, the communication module may operate an 
alternative wireless communication link as outlined above for the portable data 
storage device. 

Preferably, the method further comprises communicating periodically or 
quasi-continuously between the communication module and a base station device 
over a wireless communication link. 



WO 03/009621 



PCT/GB02/03287 



-11 - 

Preferably, the predetermined condition comprises failure of the wireless 
communication link between the communication module and the base station 
device. Alternative or additional predetermined conditions described for the first 
aspect may be applied to this aspect. 

5 

A further aspect provides apparatus comprising: 
means for storing a unique identifier; 

means for implementing an alert procedure in response to a predetermined 
condition; 

10 a communication module for communicating the unique identifier to a network as 
part of the alert procedure. 

Features of the previous aspect may be incorporated into the present aspect. In 
particular, the communication module may be a Bluetooth communication module 
15 and the unique identifier may be a Bluetooth serial number. 

The apparatus may be advantageously manufactured to be very small and may be 
incorporated into a device such as a mobile telephone or a handheld computer. The 
apparatus may also be incorporated into electrical equipment, such as a video 

20 recorders or television set. The apparatus may be attached to or incorporated into 
clothing, or may be a discrete device in the form of a keyring, or an insert which 
would fit into a wallet. Hence the apparatus may be used to secure, for example, a 
bag, items of luggage, or a set of keys. The apparatus may also be incorporated into 
a larger item, such as a car or a bicycle. Preferably, the apparatus is incorporated 

25 into items that are likely to be lost or stolen, particularly high-value but portable 
items. 

According to a further aspect, there is provided a method of compiling an inventory 
of at least one object, the or each object having an associated communication 
30 module the method comprising: 

receiving, at a first communication module, a unique identifier of a communication 
module over a wireless communication link; 
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storing a list of the or each communication module unique identifier as an identifier 
of the corresponding object. 

The or each communication module may comprise a Bluetooth communication 
5 module and the unique identifier for the or each communication module may 
comprise the Bluetooth serial number. The wireless communication link over which 
the or each unique identifier is received may also be a Bluetooth communication 
link. 

1 0 The received identifiers may also be associated with further data about the devices 
which contain the communication modules correspond. This data may also be 
stored in the list or inventory alongside the received identifiers. For example, a 
description of the device containing each communication module may be stored in 
the inventory and data such as the time at which the unique identifier was first 

1 5 received or the time at which the unique identifier was last received may also be 
stored. Descriptions of the devices may be based on the identifiers received, hence 
it is the identifier that acts as the 'tag' for the device. The description of the devices 
corresponding to each identifier may be provided, for example, by the manufacturer. 
Since it is difficult to change a Bluetooth serial number, using this number as a 'tag* 

20 for the device may overcome problems associated with prior art inventory systems 
in which unauthorised amendments and alterations to the descriptions of devices 
and items may be made. 

More than one unique identifier may be received from the or each further 
25 communication module, for example a mobile telephone may transmit its 
International Mobile Equipment Identity (IMEI) number. 

Different types of unique identifier may be received from different communication 
modules (for example, a mobile telephone without a Bluetooth chip may transmit 
30 only its IMEI number) and unique identifiers may be received over different types of 
wireless communication links. For example, some unique identifiers may be received 
over a Bluetooth communication link, whereas other unique identifiers may be 
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received over a 802.11a or 802.11b wireless LAN link. 

Unique identifiers of communication modules may be assembled automatically in 
a 'pull' method of operation. For example, the method may further comprise 
5 transmitting a signal to request identification numbers from any new communication 
modules that are within range. This may be done periodically, or on request from a 
user. Alternatively or in addition, a 'push* method of operation may be implemented, 
with communication modules automatically transmitting their unique identifiers. The 
method may further comprise providing the functionality to allow unique identifiers 
10 of communication modules to be added to the inventory manually, perhaps using an 
interface incorporated into, or attached to the first communication module (the first 
communication module being operable to implement the methods outlined above). 

The method may also comprise the further functionality of the base station 
15 apparatus, which is outlined below. 

A further aspect provides a base station which comprises: 
a communication module for operating a wireless communication link to at least one 
further communication module; 
20 memory means for storing an inventory of at least one unique identifier 
corresponding to the or each further communication module. 

The base station may be suitable for implementing the method outlined in the 
previous aspect or any of its preferred features. 

25 

Preferably, the base station may further comprise means for monitoring the 
presence of the or each communication module corresponding to the or each unique 
identifier over a wireless communication link. The base station preferably 
periodically, or quasi-continuously, opens a wireless communication link to the or 
30 each communication module to ensure that the communication module is still within 
range of the base station. The identifier of any communication module that is not 
contactable over the wireless communication link may be added to a list of 'missing 1 
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communication modules. This list may be stored within the base station or may be 
transmitted to a remote device or network, for example, the list may be accessible 
over the internet (preferably using a secure connection) or may be transmitted to a 
police database, or a database of an insurance company. A police database of 
5 identifiers of 'missing' communication modules may be used to identify stolen or lost 
communication modules, as described in more detail below. Identifiers of 
communication modules that are not contactable may be sent to a central database 
of 'missing' items. Descriptions of these items, based on the identifiers may also be 
stored in the database. 

10 

According to a further aspect, there is provided an inventory of at least one unique 
identifier, the or each unique identifier corresponding to a communication module, 
the inventory compiled by receiving, at a base station, the or each unique identifier 
over a wireless communication link. 

15 

Preferred features of the previous two aspects may also be applied to this aspect. 

According to a further aspect, there is provided a detection device suitable for 
detecting at least one lost or stolen device containing a communication module, the 
20 detection device comprising: 

means for receiving at least one identifier of the or each communication module 
over a wireless communication link. 

means for determining whether the or each identifier corresponds to an identifier on 
a list of identifiers of lost or stolen communication modules. 

25 

The detection device may further comprise means for storing the list of identifiers 
of lost or stolen communication modules, or may comprise means for accessing the 
list if it is stored remotely. The detection device may further comprise means for 
requesting an identifier from a communication module over a wireless 
30 communication link. The communication module is preferably a Bluetooth 
communication module and the wireless communication link is preferably a 
Bluetooth communication link. The detection device may further comprise means 
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for obtaining the list of identifiers from a network, for example, via a computer 
connected to the internet. 

A further aspect provides a method of detecting at least one lost or stolen device 
5 containing a communication module, the method comprising: 

receiving at least one identifier of the or each communication module over a wireless 
communication link. 

determining whether the or each identifier corresponds to an identifier on a list of 
identifiers of lost or stolen communication modules. 

10 

Preferred features of the detection device aspect outlined above may also be 
applied to this aspect. 

A further aspect provides an electrical appliance with a communication module and 
15 a primary power supply, preferably an external power supply, wherein the 
communication module an internal power supply for supplying power to the 
communication module when the external power supply is not available, the internal 
power supply being sufficient to allow the communication module to transmit a 
unique identifier over a wireless communication link to a network in response to the 
20 initiation of an alert procedure. 

The alert procedures outlined above may be applied to this aspect. The 
communication module is preferably a Bluetooth communication module and the 
unique identifier is preferably a Bluetooth serial number. 

25 

This aspect may allow communication from the appliance over the communication 
link even if the appliance does not have access to an external power supply. Hence 
communication may occur on the wireless communication link even if the appliance 
is left unplugged. This may be particularly useful in enabling an authority, such as 
30 the police, to identify stolen appliances that are not plugged in to a power supply. 



The internal power supply preferably comprises a rechargeable power supply, such 



WO 03/009621 



PCT/GB02/03287 



-16- 

as a rechargeable battery, which is preferably able to supply power to the 
communication module for a least a week when the external power supply is not 
available. More preferably, the rechargeable battery is able to supply power for a 
month. More preferably, the rechargeable battery is able to supply power for more 
5 than a month. More preferably, the rechargeable battery is able to supply power for 
more than six months. The battery may recharge automatically when the appliance 
is attached to the external supply. 

The internal power supply may also allow other functions of the appliance to 
1 0 operate. Alternatively, the appliance may allow the internal power supply to be used 
only to transmit the unique identifier to a detection device. This may prevent the 
internal power supply being drained by being used to provide other functions of the 
appliance or communication module. 

15 The internal power supply may further allow the appliance to enter a 'sleep* mode 
on disconnection from the primary power supply. The communication module in the 
appliance may wake from the sleep mode upon receipt of a request for its unique 
identifier, which may be received from a detection device. 

20 In a further embodiment, the communication module may periodically transmit its 
identification number over the wireless communication link, in this way, the identifier 
of the communication module may be detected by any detection device within range. 

A further aspect provides a method of operating a device containing a 
25 communication module comprising: 

communicating a unique identifier of the communication module over a wireless 

communication link to a network; 

receiving an activation signal to activate the device. 

30 This may allow remote activation of a device, for example a device may be activated 
upon registration with the manufacturer, or may be activated at the point of sale. 
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The method may alternatively, or additionally comprise receiving a deactivation 
signal at the communication module over the wireless communication link to allow 
deactivation of the device. This may allow, for example, the police to deactivate 
stolen goods remotely, or may allow licensing authorities to deactivate goods for 
5 which a licence has not been paid, for example a television may be deactivated 
remotely if it does not have a corresponding television licence. 

A description of one embodiment of the present application now follows. United 
Kingdom patent application GB 01 17530.6, the contents of which are incorporated 

1 0 herein by reference, describes systems and methods by which data may be backed 
up periodically between a portable data storage device, such as a mobile telephone 
handset or a PDA, and a backup device over a wireless communication link. In 
addition, an alert procedure may be triggered in the backup device and/or in the 
portable data storage device if the portable data storage device goes out of range 

1 5 of the backup device. Example alert procedures may include the triggering of visible 
or audible alarms at one or both of the devices, rendering one or both of the devices 
unusable, for example by requiring the input of a code for their further uses, or 
alerting a network, for example a mobile telecommunications network. According to 
a preferable embodiment of the earlier application, the wireless communication link 

20 is a Bluetooth communication link. 

An embodiment of the invention will now be described, by way of example, with 
reference to the accompanying drawings in which: 

Fig. 1 shows a system in accordance with an embodiment of the present 

25 invention. 

Fig. 2 shows an example of an alert procedure according to one embodiment 
of the present invention. 

Fig. 3 shows a system in which the identity of a device may be verified. 

30 The system shown in Fig. 1 comprises a portable data storage device 1 00, a backup 
device 110, a detection device 120 and a network 130 from which the detection 
device 120 may obtain information. 
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ln this embodiment, the portable data storage device 100 is in the form of a mobile 
telephone and includes a short-range wireless communication interface, in this 
embodiment in the form of a Bluetooth transceiver chip. The transceiver may be 
integrated within the device itself, as in this embodiment, or may be provided as an 
5 additional component, which may then be integrated with the device or integrated 
with a battery for the device or within the battery housing. The device 100 stores 
contact details and optionally appointments or other data within the body of the 
device or on a SIM card provided with the device and a processor within the device 
100 communicates with the communication interface. 

10 

Each Bluetooth chip has a unique Bluetooth serial number, which means that each 
device with an embedded Bluetooth chip has a unique Bluetooth identification 
number. If, as in this embodiment, the portable data storage device is a mobile 
telephone, the Bluetooth identification number is an identifying number additional 
15 to the IMEI number of the mobile telephone, discussed above. However, changing 
the Bluetooth serial number of a portable data storage device, for example a stolen 
mobile telephone handset, is a separate and a more difficult process than changing 
IMEI number. This may allow the Bluetooth serial number to be used as a tag for the 
portable data storage device. 

20 

The backup device 1 10 has a short-range wireless communication interface, in this 
embodiment in the form of a Bluetooth transceiver chip. An internal or external 
antenna may be provided, optionally on a circuit board. A processor may be used 
to control the operation of the backup device 110, specifically controlling 
25 communication via the interface. The short-range wireless communication interface 
of the backup device 110 may comprise means for receiving and storing the- 
Bluetooth serial number of the portable data storage device 100. 

The backup device may further comprise means to receive a user input 1 14 and an 
30 alarm device 1 1 2, for example a piezo electric sounder. A battery (not shown) may 
also be provided within the housing (although the device may, in some cases, be 
powered by the transmissions from the portable data storage device). The alarm 
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device may further include a visible alert or a vibrating alert device. The user input 
1 14 means is preferably a simple input device, for example a single input button or 
a few buttons. A useful minimum function to implement with the user input device 
is cancelling of an alarm; other functions may be implemented by controlling the 
device via the communication interface. However, a more complex user interface 
may be provided, for example a voice recognition interface. In an alternative 
embodiment, the user interface may be omitted entirely; in such a case the alarm 
is preferably arranged to silence automatically after a predetermined time. 

The backup device 110 optionally also includes backup data storage, for example 
FLASH memory. The amount of memory may be as little as 1Kb, for example to 
backup only key data but will typically be at least 64 Kbytes. Often considerably 
more memory, for example of the order of 1 Mb to 1 0Mb and sometimes as much as 
128Mb or even more may be provided, depending on the capacity of the device 1 00. 
The processor may further be used to control storage of data. 

The backup device may be provided in a convenient housing, according to this 
embodiment the device is in the form of a key fob having a key ring 1 1 6 attached so 
that the device can conveniently be carried and is unlikely to be lost. 

In an alternative embodiment, the device 1 1 0 may be attachable to or woven into an 
article of clothing, or may be incorporated into an alternative, preferably portable 
housing. 

The detection device 120 preferably incorporates a short-range wireless 
communication interface, in this embodiment this is also a Bluetooth transceiver 
chip. In this embodiment, the detection device 120 further comprises means for 
communicating with a separate network 130. This may comprise means for 
communicating with the separate network 130 over a wireless communication link, 
but, in this embodiment, the detection device 120 comprises means to download 
data from the separate network 130 by connecting to a base station (not shown) in 
the separate network. The detection device 120 may connect to the base station 
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using a physical connection, or a wireless communication link, for example by using 
the short-range wireless communication interface. The detection device 1 20 further 
comprises means for storing data downloaded from the separate network, for 
example, the detection device may store a list of identifiers of lost or stolen portable 
5 data storage devices. 

One example of an alert procedure which may be implemented by the embodiment 
shown in Fig. 1 will now be described with reference to Fig. 2. 

10 In the example of Fig. 2, an alert procedure is triggered 200 by the portable data 
storage device passing out of the range of communication with the backup device. 
As described in more detail in United Kingdom patent application number GB 
01 17530.6, the alert procedure may be triggered when the portable data storage 
device moves a predetermined distance away from the backup device, or when the 

15 backup device is unable to maintain a communication link to the portable data 
storage device. 

The alert procedure may involve the triggering of one or more of a visible, an audible 
or a vibrating alarm at the backup device 205, and/or at the portable data storage 
20 device, to alert the owner that the portable data storage device has passed out of 
range of the backup device. According to an additional, highly preferable feature, the 
portable data storage device may also be partially or fully disabled 21 0, for example 
by requiring a password or code before further use of the portable data storage 
device is possible. 

25 

According to this embodiment, the alert procedure comprises the further step of the 
portable data storage device sending a message to the separate network 215, the 
message containing an identifier of the portable data storage device, for example 
the Bluetooth serial number, or the IMEI number of the portable data storage device. 
30 The detection device may then receive the identifier of the lost of stolen portable 
data storage device 220. This may occur by the detection device downloading 
information from a base station connected to the mobile network. 
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The detection device may then send out query requests 225 to nearby portable data 
storage devices to which it may connect over a short-range wireless communication 
link, for example a Bluetooth link. These requests may allow the detection device to 
obtain the Bluetooth serial numbers of the nearby portable data storage devices, 
5 and optionally also the IMEI numbers of any nearby portable data storage devices 
that are also mobile entities. The Bluetooth serial numbers obtained may then be 
checked against the list of identifiers of stolen or lost portable data storage devices 
downloaded from the separate network. Hence, in this embodiment, the detection 
device may be used by an authority, such as the police, to detect and recover any 
1 0 lost or stolen portable data storage device. 

According to a further feature of this embodiment, any IMEI numbers obtained for 
mobile entities may be checked against their corresponding Bluetooth serial 
numbers in a database, which may be stored within the detection device or 

1 5 accessed from a remote location by the detection device. Any portable data storage 
device for which the IMEI number does not correspond to the Bluetooth serial 
number may be cause further investigations to be initiated, since the IMEI number 
of the portable data storage device may have been altered. The true identity of the 
portable data storage device may be determined using the Bluetooth serial number, 

20 since this is more difficult to change than the IMEI number. If the IMEI number 
corresponds to the Bluetooth number, then a certificate may be generated and 
issued to the portable data storage device. This certificate may be used by other 
devices in connecting to the portable data storage device to ensure that the identity 
of ths portable data storage device has been successfully verified. 

25 

Verifying the identity of a portable data storage device, such as a mobile telephone, 
in the manner outlined above, may also be a process initiated by the network itself. 
The network may be prompted to verify the identity of the portable data storage 
device as part of an alert procedure such as one of the alert procedures outlined 
30 above, or, for example, when the portable data storage device registers with the 
network, or when the portable data storage device attempts to establish a call. If the 
network successfully identifies the portable data storage device and issues a 
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certificate, then the detection device may not need to repeat the procedure for that 
portable data storage device, but may simply check the certificate to establish the 
identity of the portable data storage device. 

5 With reference to Fig. 3, the identity of a device, in this case a mobile telephone 
handset, may be verified in a number of different ways. 

The handset 310 may transmit its SIM number 315, IMEI number 320, and 
Bluetooth serial number 325 to the network 300 individually for the network to verify 

10 the identity of the handset 310 and generate a certificate of identity. An alternative 
method, however, is for the handset 31 0 to generate an identity certificate itself from 
the SIM 31 5, IMEI 320 and Bluetooth 325 numbers and transmit this to the network 
300. The network 300 may then verify the identity of the handset 310 without the 
handset having to transmit its actual SIM, IMEI and Bluetooth numbers. The 

15 certificate, or the individual numbers, may be encoded securely for transmission 
from the handset 310 to the network 300. 

As an alternative to seizing a portable data storage device which has been lost or 
stolen, or which does not have an IMEI number corresponding to its Bluetooth serial 
20 number, the operator of the detection device, or the operator of the 
telecommunications network, in the case of a mobile telephone, may bar the 
portable data storage device from use. 

According to a further embodiment, the system described above may operate in a 
25 symmetrical manner. For example, loss or theft of the backup device may also 
cause an alert procedure to be initiated, and the separate network may be informed 
of the Bluetooth serial number for the backup device, which may then be detected 
by the detection device and disabled or seized. 

30 In addition, according to a further embodiment, the backup device may act as a 
backup device for a plurality of portable data storage devices, for example, a mobile 
telephone and a PDA of a user. Each portable data storage device may be 
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preregistered with the backup device, and the backup device may store the 
Bluetooth serial number for each portable data storage device. The backup device 
preferably allows wireless communications links to be set up from itself only to 
preregistered portable data storage devices. This may increase the security of any 
5 data stored within the backup device. An authorisation code or signal may be 
required to put the backup device into a registration mode in which new devices may 
register and pair with the backup device. Pairing attempts by unregistered portable 
data storage devices may be rejected, and an attempt by an unregistered device to 
pair with the backup device may cause an alert procedure to be initiated. This alert 
10 procedure may be the same as that outlined above, or may be a different alert 
procedure. For example, an unauthorised pairing attempt may simply cause a 
warning to be sent to the registered portable data storage device that the 
unauthorised attempt has been made. 

1 5 The preceding description illustrates one embodiment of the present invention and 
modifications of detail may be provided. 
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Claims: 

1 A method of operating a portable data storage device, the method comprising 
initiating an alert procedure in response to a predetermined condition, the 
5 alert procedure comprising communicating a unique identifier of the portable 

data storage device to a network. 

2. A method according to Claim 1, further comprising communicating 
periodically or quasi-continuously between the portable data storage device 

10 and a backup device over a wireless communication link. 

3. A method according to Claim 2 wherein the predetermined condition 
comprises failure of the wireless communication link between the portable 
data storage device and the backup device for a predetermined period. 

15 

4. A method according to Claim 2 wherein the wireless communication link is a 
Bluetooth communication link. 

5. A method according to any preceding claim wherein the unique identifier of 
20 the portable data storage device is a Bluetooth serial number for the portable 

data storage device. 

6. A method according to any preceding claim wherein the identifier of the 
portable data storage device comprises both a Bluetooth serial number and 

25 an International Mobile Equipment Identity (IMEI) number. 

7. A method according to any preceding claim wherein a detection device may 
download the unique identifier of the portable data storage device from the 
network. 

30 

8. A method according to Claim 7 wherein the detection device queries the 
portable data storage device over a wireless communication link to obtain the 
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unique identifier of the portable data storage device. 

9. A method according to any preceding claim wherein data stored in the 
portable data storage device is transferred to the backup device over the 

5 wireless communication link. 

10. A method according to any preceding claim wherein the unique identifier of 
the portable data storage device is communicated to the network by the 
portable data storage device. 

10 

11. A method according to any of Claims 2 to 1 0 wherein the unique identifier of 
the portable data storage device is communicated to the network by the 
backup device. 

15 12. A method according to any preceding claim wherein the alert procedure 
further comprises communicating the unique identifier of the portable data 
storage device over a wireless communication link to a detection device. 

13. A portable data storage device comprising: 
20 means for storing a unique identifier; 

means for implementing an alert procedure in response to a predetermined 
condition; 

means for communicating the unique identifier to a network as part of the 
alert procedure. 

25 

14. A portable data storage device according to Claim 1 3 further comprising a 
Bluetooth chip, wherein the unique identifier is the Bluetooth serial number. 

15. A portable data storage device according to Claim 13 or 14 wherein the 
30 portable data storage device has an International Mobile Equipment Identity 

(IMEI) number, which is communicated to the network as part of the alert 
procedure in addition to the unique identifier. 
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16. A portable data storage device according to any of Claims 13 to 15 further 
comprising means for communicating periodically or quasi-continuously with 
a backup device over a wireless communication link. 

5 

17. A portable data storage device according to Claim 16 wherein data stored 
within the portable data storage device is communicated to the backup 
device over a wireless communication link. 

10 18. A portable data storage device according to Claim 16 or 17 wherein the 
predetermined condition comprises failure of the wireless communication link 
between the portable data storage device and the backup device for a 
predetermined period. 



15 19. A portable data storage device according to any of Claims 1 6 to 1 8 wherein 
the wireless communication link is a Bluetooth communication link. 



20. A method of detecting a lost or stolen portable data storage device 
comprising: 

20 receiving at least one identifier of a portable data storage device over a 

wireless communication link; 

determining whether the identifier of the portable data storage device 
corresponds to an identifier on a list of stolen or lost portable data storage 
devices. 

25 

21 . A method according to Claim 20 further comprising storing a list of identifiers 
which correspond to portable data storage devices which have been lost or 
stolen. 



30 22. 



A method according to Claim 20 or 21 further comprising requesting the at 
least one identifier of the portable data storage device over a wireless 
communication link. 
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23. A method according to any of Claims 20 to 22 wherein the wireless 
communication link is a Bluetooth communication link. 

5 24. A method according to any of Claims 20 to 23 wherein the at least one 
identifier of the portable data storage device is at least one of: 
the Bluetooth serial number of the portable data storage device; 
the IMEI number of the portable data storage device. 

1 0 25. A method according to any of Claims 20 to 24 wherein the list of identifiers 
of stolen or lost portable data storage devices is downloaded from a network. 

26. Apparatus for detecting a lost or stolen portable data storage device 
comprising: 

1 5 means for receiving at least one identifier of a portable data storage device 

over a wireless communication link; 

memory means for storing a list of identifiers of stolen or lost portable data 
storage devices; 

means for determining whether the received identifier of the portable data 
20 storage device corresponds to an identifier on the list of identifiers of stolen 

or lost portable data storage devices. 

27. Apparatus according to Claim 26 further comprising means for requesting 
the at least one identifier of the portable data storage device over a wireless 

25 communication link. 

28. Apparatus according to Claim 26 or 27 wherein the wireless communication 
link is a Bluetooth communication link. 

30 29. Apparatus according to any of Claims 26 to 28 wherein the at least one 
identifier of the portable data storage device is at least one of: 
the Bluetooth serial number of the portable data storage device; 
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the IMEI number of the portable data storage device. 

30. Apparatus according to any of Claims 26 to 29 further comprising means for 
downloading the list of identifiers of stolen or lost portable data storage 

5 devices from a network. 

31. A method of verifying the identity of a portable data storage device 
comprising: 

receiving, over a wireless communication link, an IMEI number for the 
1 0 portable data storage device; 

receiving, over a wireless communication link, a further unique identifier for 
the portable data storage device; 

verifying that the received IMEI number and the further unique identifier 
correspond to the same the portable data storage device. 

15 

32. A method according to Claim 31 wherein the wireless communication link is 
a Bluetooth communication link. 

33. A method according to Claim 31 or 32 wherein the further unique identifier is 
20 a Bluetooth serial number for a Bluetooth chip contained within the portable 

data storage device. 

34. A method according to any of Claims 31 to 33 wherein the step of verifying 
comprises checking the received IMEI number against the further unique 

25 identifier in a preexisting database. 

35. A method according to any of Claims 31 to 34 wherein the method of 
verifying the identity of the portable data storage device is implemented by 
a network to which the portable data storage device is connected. 

30 

36. A method according to any of Claims 31 to 34 wherein the method of 
verifying the identity of the portable data storage device is implemented by 
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a detection device which interrogates the portable data storage device across 
a wireless communication link. 

37. A method according to any of Claims 31 to 36 wherein a certificate is 
5 generated for the portable data storage device if the received IMEI number 

and the further unique identifier correspond to the same portable data 
storage device. 

38. A method according to any of Claims 31 to 37 wherein the identity of the 
1 0 portable data storage device is verified in response to the initiation of an alert 

procedure. 

39. A method of operating a communication module, the method comprising 
initiating an alert procedure in response to a predetermined condition, the 

15 alert procedure comprising communicating a unique identifier of the 

communication module to a network. 

40. A method according to Claim 39 wherein the communication module 
comprises means for operating a Bluetooth wireless communication link. 

20 

41 . A method according to Claim 39 or 40, further comprising communicating 
periodically or quasi-continuously between the communication module and 
a base station device over a wireless communication link. 

25 42. A method according to any of Claims 39 to 41 , wherein the predetermined 
condition comprises failure of the wireless communication link between the 
communication module and the base station device. 

43. Apparatus comprising: 
30 means for storing a unique identifier; 

means for implementing an alert procedure in response to a predetermined 
condition; 
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a communication module for communicating the unique identifier to a network 
as part of the alert procedure. 

44. A method of compiling an inventory of at least one object, the or each object 
5 having an associated communication module the method comprising: 

receiving, at a first communication module, a unique identifier of a 
communication module over a wireless communication link; 
storing a list of the or each communication module unique identifier as an 
identifier of the corresponding object. 

10 

45. A method according to Claim 44 wherein the or each communication module 
comprises a Bluetooth communication module. 

46. A method according to Claim 45 wherein the unique identifier for the or each 
15 communication module comprises a Bluetooth serial number. 

47. A base station, comprising: 

a communication module for operating a wireless communication link to at 
least one further communication module; 
20 memory means for storing an inventory of at least one unique identifier 

corresponding to the or each further communication module. 

48. The base station according to Claim 47, further comprising means for 
monitoring the presence of the or each communication module corresponding 

25 to the or each unique identifier over a wireless communication link. 

49. An inventory of at least one unique identifier, the or each unique identifier 
corresponding to a communication module, the inventory compiled by 
receiving, at a base station, the or each unique identifier over a wireless 

30 communication link. 



50. 



A detection device suitable for detecting at least one lost or stolen device 
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containing a communication module, the detection device comprising: 
means for receiving at least one identifier of the or each communication 
module over a wireless communication link; 

means for determining whether the or each identifier corresponds to an 
identifier on a list of identifiers of lost or stolen communication modules. 

A detection device according to Claim 50, further comprising means for 
requesting an identifier from a communication module over a wireless 
communication link. 

A method of detecting at least one lost or stolen device containing a 
communication module, the method comprising: 

receiving at least one identifier of the or each communication module over a 
wireless communication link; 

determining whether the or each identifier corresponds to an identifier on a 
list of identifiers of lost or stolen communication modules. 

An electrical appliance with a communication module and a primary power 
supply, preferably an external power supply, wherein the communication 
module has an internal power supply for supplying power to the 
communication module when the external power supply is not available, the 
internal power supply being sufficient to allow the communication module to 
transmit a unique identifier over a wireless communication link to a network 
in response to the initiation of an alert procedure. 

An electrical appliance according to Claim 53, wherein the internal power 
supply comprises a rechargeable power supply. 

An electrical appliance according to Claim 54, wherein the rechargeable 
power supply is able to supply power to the communication module for a 
least a week. 
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55 a electrical appliance according to Claim 54, wherein the rechargeable power 
supply is able to supply power to the communication module for at least a 
month. 

5 57. A electrical appliance according to Claim 54, wherein the rechargeable power 
supply is able to supply power to the communication module for at least six 
months. 

58. A electrical appliance according to any of Claims 54 to 57, wherein the 
10 rechargeable power supply recharges automatically when the appliance is 

attached to the external supply. 

59. A method of operating a device containing a communication module 
comprising: 

15 communicating a unique identifier of the communication module over a 

wireless communication link to a network; 
receiving an activation signal to activate the device. 

60. A method of operating a device containing a communication module 
20 comprising: 

receiving a deactivation signal at the communication module over the 
wireless communication link; 

deactivating the device in response to the deactivation signal. 

25 61 . A computer program or computer program product for implementing any of 
the methods herein described. 

62. Apparatus substantially as herein described or as illustrated in any of the 
drawings. 

30 

63. Use of a Bluetooth serial number of an embedded communication module as 
a unique identifier to identify an object in which the communication module 
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is embedded. 
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